MAL-2024-4713 Malicious code in СatUtіls (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3992 Malicious code in 2Cаptcha.API (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in 2Cаptcha.API (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4714 Malicious code in СatWinformUtіls (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Соstura.Fоdу (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4719 Malicious code in ІոnLoginSdk (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ІոnLoginSdk (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Ѕiticоne.Desktop.UI2 (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4718 Malicious code in ЅystemLoсk (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4716 Malicious code in Ѕiticоne.Desktop.UI2 (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4717 Malicious code in ЅSСMS (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ЅSСMS (NuGet)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-37304

NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability related to its handling of autolinks in Markdown content. While the platform properly filters out JavaScript from standard links, it does not adequately sanitize autolinks. This oversight...

Cross-site Scripting (XSS)

Overview NuGetGallery is a Core support library for NuGet Gallery Frontend and Backend. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to missing sanitization of autolinks. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker...

CVE-2024-37304 NuGetGallery's Markdown Autolinks Processing Vulnerable to Cross-site Scripting

NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability related to its handling of autolinks in Markdown content. While the platform properly filters out JavaScript from standard links, it does not adequately sanitize autolinks. This oversight...

CVE-2024-37304

CVE-2024-37304 concerns NuGetGallery, the NuGet.org frontend/back-end, where Markdown autolinks were not properly sanitized. The vulnerability allows XSS via autolinks such as , since autolinks can be rendered with insufficient sanitization despite standard JavaScript link filtering. A patch was ...

NuGet Gallery Security Vulnerability

NuGet Gallery is a NuGet open source package repository that supports NuGet. A security vulnerability exists in NuGet Gallery versions prior to 2024.05.28, which stems from improper cleanup when handling automatic links in Markdown content and is vulnerable to cross-site scripting attacks...

GitLab 12.8 < 13.5.6 / 13.6.0 < 13.6.4 / 13.7.0 < 13.7.2 (CVE-2021-22168)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - A regular expression denial of service issue has been discovered in NuGet API affecting all versions of GitLab starting from version 12.8. CVE-2021-22168 Note that Nessus has not tested for this issue...

ThievingFox - Remotely Retrieving Credentials From Password Managers And Windows Utilities

ThievingFox is a collection of post-exploitation tools to gather credentials from various password managers and windows utilities. Each module leverages a specific method of injecting into the target process, and then hooks internals functions to gather crendentials. The accompanying blog post ca...

Sketchy NuGet Package Likely Linked to Industrial Espionage Targets Developers

Threat hunters have identified a suspicious package in the NuGet package manager that's likely designed to target developers working with tools made by a Chinese firm that specializes in industrial- and digital equipment manufacturing. The package in question is SqzrFramework480, which...